include/lttng/event-rule/kernel-syscall.h

   1 /*
   2  * Copyright (C) 2019 Jonathan Rajotte <jonathan.rajotte-julien@efficios.com>
   3  *
   4  * SPDX-License-Identifier: LGPL-2.1-only
   5  *
   6  */
   7
   8 #ifndef LTTNG_EVENT_RULE_KERNEL_SYSCALL_H
   9 #define LTTNG_EVENT_RULE_KERNEL_SYSCALL_H
  10
  11 #include <lttng/event-rule/event-rule.h>
  12 #include <lttng/lttng-export.h>
  13
  14 #ifdef __cplusplus
  15 extern "C" {
  16 #endif
  17
  18 enum lttng_event_rule_kernel_syscall_emission_site {
  19         LTTNG_EVENT_RULE_KERNEL_SYSCALL_EMISSION_SITE_ENTRY_EXIT = 0,
  20         LTTNG_EVENT_RULE_KERNEL_SYSCALL_EMISSION_SITE_ENTRY = 1,
  21         LTTNG_EVENT_RULE_KERNEL_SYSCALL_EMISSION_SITE_EXIT = 2,
  22         LTTNG_EVENT_RULE_KERNEL_SYSCALL_EMISSION_SITE_UNKNOWN = -1,
  23 };
  24
  25 /*
  26  * Create a newly allocated kernel syscall event rule.
  27  *
  28  * The default pattern is '*'.
  29  * The default emission site is LTTNG_EVENT_RULE_KERNEL_SYSCALL_EMISSION_SITE_ENTRY_EXIT.
  30  *
  31  * Returns a new event rule on success, NULL on failure. This event rule must be
  32  * destroyed using lttng_event_rule_destroy().
  33  */
  34 LTTNG_EXPORT extern struct lttng_event_rule *lttng_event_rule_kernel_syscall_create(enum
  35                 lttng_event_rule_kernel_syscall_emission_site emission_site);
  36
  37 /*
  38  * Set the name pattern of a kernel syscall event rule.
  39  *
  40  * Pattern can contain wildcard '*'. See man lttng-enable-event.
  41  *
  42  * The pattern is copied internally.
  43  *
  44  * Returns LTTNG_EVENT_RULE_STATUS_OK on success, LTTNG_EVENT_RULE_STATUS_INVALID
  45  * if invalid parameters are passed.
  46  */
  47 LTTNG_EXPORT extern enum lttng_event_rule_status lttng_event_rule_kernel_syscall_set_name_pattern(
  48                 struct lttng_event_rule *rule, const char *pattern);
  49
  50 /*
  51  * Get the name pattern of a kernel syscall event rule.
  52  *
  53  * The caller does not assume the ownership of the returned pattern. The
  54  * pattern shall only only be used for the duration of the event rule's
  55  * lifetime, or before a different pattern is set.
  56  *
  57  * Returns LTTNG_EVENT_RULE_STATUS_OK and a pointer to the event rule's pattern
  58  * on success, LTTNG_EVENT_RULE_STATUS_INVALID if an invalid
  59  * parameter is passed, or LTTNG_EVENT_RULE_STATUS_UNSET if a pattern
  60  * was not set prior to this call.
  61  */
  62 LTTNG_EXPORT extern enum lttng_event_rule_status lttng_event_rule_kernel_syscall_get_name_pattern(
  63                 const struct lttng_event_rule *rule, const char **pattern);
  64
  65 /*
  66  * Set the filter expression of a kernel syscall event rule.
  67  *
  68  * The expression is copied internally.
  69  *
  70  * Returns LTTNG_EVENT_RULE_STATUS_OK on success, LTTNG_EVENT_RULE_STATUS_INVALID
  71  * if invalid parameters are passed.
  72  */
  73 LTTNG_EXPORT extern enum lttng_event_rule_status lttng_event_rule_kernel_syscall_set_filter(
  74                 struct lttng_event_rule *rule, const char *expression);
  75
  76 /*
  77  * Get the filter expression of a kernel syscall event rule.
  78  *
  79  * The caller does not assume the ownership of the returned filter expression.
  80  * The filter expression shall only only be used for the duration of the event
  81  * rule's lifetime, or before a different filter expression is set.
  82  *
  83  * Returns LTTNG_EVENT_RULE_STATUS_OK and a pointer to the event rule's filter
  84  * expression on success, LTTNG_EVENT_RULE_STATUS_INVALID if an invalid
  85  * parameter is passed, or LTTNG_EVENT_RULE_STATUS_UNSET if a filter expression
  86  * was not set prior to this call.
  87  */
  88 LTTNG_EXPORT extern enum lttng_event_rule_status lttng_event_rule_kernel_syscall_get_filter(
  89                 const struct lttng_event_rule *rule, const char **expression);
  90
  91 /*
  92  * Get the emission site of a kernel syscall event rule.
  93  *
  94  * Returns a enum lttng_event_rule_kernel_syscall_emission_site.
  95  */
  96 LTTNG_EXPORT extern enum lttng_event_rule_kernel_syscall_emission_site
  97 lttng_event_rule_kernel_syscall_get_emission_site(
  98                 const struct lttng_event_rule *rule);
  99
 100 #ifdef __cplusplus
 101 }
 102 #endif
 103
 104 #endif /* LTTNG_EVENT_RULE_KERNEL_SYSCALL_H */